Chrome Security Update Patches 41 Vulnerabilities, Including 6 Critical Flaws

TL;DR

Google shipped a Chrome security update for the stable desktop channel. It fixes 41 vulnerabilities in total. Six of them carry a critical rating. Users should update to version 151.0.7922.108 as soon as possible.

Notable CVEs

Why it matters

Chrome runs on billions of devices worldwide. A memory-safety flaw can lead to a browser takeover. Therefore this Chrome security update matters for almost every desktop user.

What the flaws are

Most of the fixes address memory-safety bugs. Use-after-free issues dominate the list. The six critical flaws affect core components.

The critical bugs

Two critical flaws sit in WebGL, tracked as CVE-2026-19137 and CVE-2026-19170. Others affect Aura (CVE-2026-19149), Skia (CVE-2026-19154), ANGLE (CVE-2026-19157), and Views (CVE-2026-19172). Each could let a crafted web page corrupt memory in the browser.

External researchers credited

Google credited outside researchers for several fixes. One WebGL flaw came from a STAR Labs team. Google paid rewards of up to 5,000 dollars for some high-severity reports.

Exploitation status

Google has not reported any in-the-wild exploitation for these flaws. No public proof-of-concept has been confirmed. As usual, Google is keeping bug details restricted until most users update.

Affected versions

The flaws affect Chrome versions before the fixed build. This applies to Windows, Mac, and Linux.

Patch and mitigation

Update now. Google fixed the issues in Chrome 151.0.7922.108 and .109 for Windows and Mac, and 151.0.7922.108 for Linux. The rollout continues over the coming days and weeks. See the official Chrome stable channel update for the full list.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.